BiDiConvertAnsiToOem
BiDiConvertDialogBox
BiDiConvertOemToAnsi
Static task
static1
Behavioral task
behavioral1
Sample
JaffaCakes118_488c0ba87dfed18896804be1f908db30.dll
Resource
win7-20240903-en
Target
JaffaCakes118_488c0ba87dfed18896804be1f908db30
Size
132KB
MD5
488c0ba87dfed18896804be1f908db30
SHA1
9efe8efaa85a4490fb5008a24a611b3fb078f13d
SHA256
48bd909ec525f64787f2c1149f7faee89f51b7fcca79fee6ac3561a79e5a2214
SHA512
d2512dbf2e1317edc6fc36fb5008c00d0f913fb77555fff0d8c20eb21f499ffe203c73e84f97b786e738bf98ed484140dc51de84cd10bb3ba6fed1d09b96ae3d
SSDEEP
3072:k0x7OzOBdr4BAzzid7VeByZ+WqDIjyMY2+:v7O6zMBAzAGyEWqDK
Checks for missing Authenticode signature.
resource |
---|
JaffaCakes118_488c0ba87dfed18896804be1f908db30 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
LoadResource
FindResourceExA
SetLastError
GlobalFree
GlobalUnlock
LockResource
EnterCriticalSection
FreeResource
FreeLibrary
GetProcAddress
LoadLibraryA
GetSystemDirectoryA
GetStringTypeExA
LeaveCriticalSection
InitializeCriticalSection
GlobalAlloc
GlobalLock
HeapDestroy
FreeEnvironmentStringsA
FreeEnvironmentStringsW
FlushFileBuffers
SetStdHandle
CloseHandle
SetFilePointer
UnhandledExceptionFilter
RtlUnwind
LCMapStringA
GetStringTypeW
LCMapStringW
GetCommandLineA
GetVersion
ExitProcess
TerminateProcess
GetCurrentProcess
DeleteCriticalSection
HeapCreate
HeapFree
VirtualFree
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
IsBadWritePtr
IsBadReadPtr
HeapValidate
GetModuleFileNameA
InterlockedDecrement
DebugBreak
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
WriteFile
HeapAlloc
VirtualAlloc
HeapReAlloc
MultiByteToWideChar
GetStringTypeA
OutputDebugStringA
InterlockedIncrement
GetLastError
GetCPInfo
GetACP
GetOEMCP
SetConsoleCtrlHandler
DialogBoxIndirectParamA
ReleaseDC
SetFocus
GetDC
EndDialog
MessageBoxA
LoadStringA
ShowWindow
SendDlgItemMessageA
GetDlgItem
GetCharacterPlacementA
SetTextAlign
GetTextAlign
GetTextMetricsA
BiDiConvertAnsiToOem
BiDiConvertDialogBox
BiDiConvertOemToAnsi
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE